CWE-276
Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
Impactr finds and proves whether CWE-276 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.